Month: September 2024
TD Synnex CEO Patrick Zammit, who started in September in his new job, talks wabout the past quarter, PC growth and the retirement of TD Synnex North America President Peter Larocque. Ready To Fire On All Cylinders TD Synnex’s new CEO Patrick Zammit, presiding over the first quarterly financial report since he took over the…
Read MoreMS-ISAC ADVISORY NUMBER: 2024-105 DATE(S) ISSUED: 09/27/2024 OVERVIEW: Multiple vulnerabilities have been discovered in Foxit PDF Reader and Editor, the most severe of which could result in arbitrary code execution. Foxit PDF Reader is a multilingual freemium PDF tool that can create, view, edit, digitally sign, and print PDF files. Successful exploitation of the most…
Read More
Sep 30, 2024Ravie LakshmananCybersecurity / Weekly Recap Hold onto your hats, folks, because the cybersecurity world is anything but quiet! Last week, we dodged a bullet when we discovered vulnerabilities in CUPS that could’ve opened the door to remote attacks. Google’s switch to Rust is paying off big time, slashing memory-related vulnerabilities in Android. But…
Read More
Organizations face increasingly sophisticated threats in today’s rapidly evolving cybersecurity landscape. Traditional security measures are often inadequate to detect and respond to these advanced attacks, leading to the rise of Endpoint Detection and Response (EDR) tools. Understanding EDR Tools: A Comprehensive Overview Before delving into the benefits of EDR tools, it’s crucial to understand…
Read MoreMS-ISAC ADVISORY NUMBER: 2024-106 DATE(S) ISSUED: 09/27/2024 OVERVIEW: Multiple vulnerabilities have been discovered in PHP, the most severe of which could allow for remote code execution. PHP is a programming language originally designed for use in web-based applications with HTML content. Successful exploitation could allow for remote code execution in the context of the affected…
Read More
Organizations face an ever-increasing array of sophisticated threats in today’s rapidly evolving cybersecurity landscape. Security Information and Event Management (SIEM) systems have become crucial tools in the fight against these threats. They provide real-time analysis of security alerts generated by various network hardware and software;’. However, the effectiveness of a SIEM solution heavily depends on…
Read More
The Data Protection Commission (DPC) in Ireland has fined Meta Platforms Ireland Limited (MPIL) €91 million ($100 million) for storing in plaintext passwords of hundreds of millions of users. The incident occurred in 2019. At the time, Meta disclosed it publicly and notified DPC, which initiated an investigation into the tech giant’s practices for storing…
Read More
In today’s rapidly evolving digital landscape, small and medium-sized businesses (SMBs) face an increasingly complex array of cybersecurity threats. As cyber-attacks become more sophisticated and frequent, more than traditional security measures are often needed to protect against these advanced threats. This is where Security Information and Event Management (SIEM) solutions come into play. Cloud-based SIEM…
Read More
Attackers are increasingly turning to session hijacking to get around widespread MFA adoption. The data supports this, as: 147,000 token replay attacks were detected by Microsoft in 2023, a 111% increase year-over-year (Microsoft). Attacks on session cookies now happen in the same order of magnitude as password-based attacks (Google). But session hijacking isn’t a new…
Read More
A critical vulnerability in NVIDIA Container Toolkit impacts all AI applications in a cloud or on-premise environment that rely on it to access GPU resources. The security issue is tracked as CVE-2024-0132 and allows an adversary to perform container escape attacks and gain full access to the host system, where they could execute commands or exfiltrate sensitive information.…
Read More